Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,683 total · sorted newest first- Jun 20, 2022
Malicious code in calc_sbqwv1qkzg (npm)
- Jun 20, 2022
Malicious code in calc_fspq574if2 (npm)
- Jun 20, 2022
Malicious code in calc_bc8zluyekj (npm)
- Jun 20, 2022
Malware in calc_wqq3wgo8y9
1 compromised version
- Jun 20, 2022
Malware in calc_bc8zluyekj
1 compromised version
- Jun 20, 2022
Malware in calc_zf0nakil18
1 compromised version
- Jun 20, 2022
Malware in calc_fspq574if2
1 compromised version
- Jun 20, 2022
Malware in calc_sbqwv1qkzg
1 compromised version
- Jun 20, 2022
Malicious code in calc_qq9esg40er (npm)
- Jun 20, 2022
Malicious code in calc_8kp8btogfy (npm)
- Jun 20, 2022
Malicious code in calc_545f8kcu2j (npm)
- Jun 20, 2022
Malware in calc_545f8kcu2j
1 compromised version
- Jun 20, 2022
Malware in calc_8kp8btogfy
1 compromised version
- Jun 20, 2022
Malware in calc_qq9esg40er
1 compromised version
- Jun 20, 2022
Malicious code in now-dashboard-analyze (npm)
- Jun 20, 2022
Malicious code in microsoft-intern (npm)
- Jun 20, 2022
Malicious code in it-advisor-webclient (npm)
- Jun 20, 2022
Malicious code in calc_8t54md4jfe (npm)
- Jun 20, 2022
Malware in calc_8t54md4jfe
1 compromised version
- Jun 20, 2022
Malware in it-advisor-webclient
1 compromised version
- Jun 20, 2022
Malware in microsoft-intern
1 compromised version
- Jun 20, 2022
Malware in now-dashboard-analyze
1 compromised version
- Jun 20, 2022
Malicious code in xienimnew (npm)
- Jun 20, 2022
Malicious code in calculator_artificialinteligence (npm)
- Jun 20, 2022
Malicious code in calc_ey6ts1s5ll (npm)
- Jun 20, 2022
Malicious code in calc_bx9d74rupg (npm)
- Jun 20, 2022
Malware in calc_ey6ts1s5ll
1 compromised version
- Jun 20, 2022
Malware in xienimnew
1 compromised version
- Jun 20, 2022
Malware in calc_bx9d74rupg
1 compromised version
- Jun 20, 2022
Malware in calculator_artificialinteligence
1 compromised version
- Jun 20, 2022
Malicious code in tuhin1729 (npm)
- Jun 20, 2022
Malicious code in tdd-react-store-locator (npm)
- Jun 20, 2022
Malicious code in mdcs-pns (npm)
- Jun 20, 2022
Malicious code in invision-nodejs-test-utils (npm)
- Jun 20, 2022
Malicious code in calc_nll0q4swog (npm)
- Jun 20, 2022
Malware in mdcs-pns
1 compromised version
- Jun 20, 2022
Malware in tuhin1729
1 compromised version
- Jun 20, 2022
Malware in calc_nll0q4swog
1 compromised version
- Jun 20, 2022
Malware in invision-nodejs-test-utils
1 compromised version
- Jun 20, 2022
Malware in tdd-react-store-locator
1 compromised version
- Jun 20, 2022
Malicious code in se.hecate.visual-studio (npm)
- Jun 20, 2022
Malicious code in oopp (npm)
- Jun 20, 2022
Malicious code in kiota-serialization-json (npm)
- Jun 20, 2022
Malicious code in kiota-authentication-azure (npm)
- Jun 20, 2022
Malware in kiota-authentication-azure
1 compromised version
- Jun 20, 2022
Malware in oopp
1 compromised version
- Jun 20, 2022
Malware in se.hecate.visual-studio
1 compromised version
- Jun 20, 2022
Malware in kiota-serialization-json
1 compromised version
- Jun 20, 2022
Malicious code in test-free (npm)
- Jun 20, 2022
Malicious code in ravi-test (npm)
Page 7164 of 7,294